promoting version 7.22.0-7 (#7)

Co-authored-by: Ubuntu <ubuntu@ip-172-31-59-143.eu-central-1.compute.internal>

Author: yuvallevy2

charts/redis-enterprise-operator/Chart.yaml

@@ -1,11 +1,19 @@
+annotations:
+  artifacthub.io/changes: |
+    - kind: changed
+      description: The full release notes are available here. Note that the chart versions match the software versions.
+      links:
+        - name: CHANGELOG
+          url: https://redis.io/docs/latest/operate/kubernetes/release-notes/
+
 apiVersion: v2
 type: application
 
 name: redis-enterprise-operator
 description: A Helm chart for Redis Enterprise Operator for Kubernetes
 
-version: 7.8.6-1
-appVersion: 7.8.6-1
+version: 7.22.0-7
+appVersion: 7.22.0-7
 
 home: https://redis.com
 icon: https://redis.io/wp-content/uploads/2024/04/Logotype.svg

charts/redis-enterprise-operator/README.md

@@ -26,7 +26,7 @@ Install using the Redis helm repository.
 
 ```sh
 helm repo add redis-enterprise-operator https://helm.redis.io/
-helm install my-redis-enterprise-operator redis-enterprise-operator/redis-enterprise-operator --version 7.8.6-1
+helm install my-redis-enterprise-operator redis-enterprise-operator/redis-enterprise-operator --version 7.22.0-7
 ```
 
 To install the chart on **OpenShift**, set the `openshift.mode=true` value:

charts/redis-enterprise-operator/templates/openshift/scc.yaml

@@ -4,7 +4,8 @@ kind: SecurityContextConstraints
 metadata:
   name: redis-enterprise-scc-v2
   annotations:
-    kubernetes.io/description: redis-enterprise-scc-v2 is the minimal SCC needed to run Redis Enterprise nodes on Kubernetes.
+    kubernetes.io/description: redis-enterprise-scc-v2 is the minimal SCC needed to run Redis Enterprise nodes on Kubernetes
+      with automatic FD limit adjustment enabled.
       It provides the same features as restricted-v2 SCC, but allows pods to enable the SYS_RESOURCE capability,
       which is required by Redis Enterprise nodes to manage file descriptor limits and OOM scores for database shards.
       Additionally, it requires pods to run as UID/GID 1001, which are the UID/GID used within the Redis Enterprise node containers.
@@ -18,7 +19,7 @@ allowHostIPC : false
 allowHostNetwork: false
 allowHostPID: false
 allowHostPorts: false
-allowPrivilegeEscalation: false
+allowPrivilegeEscalation: true
 allowPrivilegedContainer: false
 readOnlyRootFilesystem: false
 runAsUser:

charts/redis-enterprise-operator/templates/operator.yaml

@@ -48,10 +48,14 @@ spec:
                       value: {{ .rigger.registry }}/{{ .rigger.image }}
                     - name: DEFAULT_BOOTSTRAPPER_IMAGE_REPOSITORY
                       value: {{ .operator.registry }}/{{ .operator.image }}
+                    - name: DEFAULT_CALL_HOME_IMAGE_REPOSITORY
+                      value: {{ .callhome.registry }}/{{ .callhome.image }}
                     - name: DEFAULT_RIGGER_IMAGE_DIGEST
                       value: {{ .rigger.digest }}
                     - name: DEFAULT_BOOTSTRAPPER_IMAGE_DIGEST
                       value: {{ .operator.digest }}
+                    - name: DEFAULT_CALL_HOME_IMAGE_DIGEST
+                      value: {{ .callhome.digest }}
                     {{- end }}
                     {{- end }}
                   envFrom:

charts/redis-enterprise-operator/templates/role.yaml

@@ -73,6 +73,18 @@ rules:
         - update
         - list
         - watch
+    - apiGroups:
+        - batch
+      resources:
+        - cronjobs
+      verbs:
+        - create
+        - delete
+        - get
+        - patch
+        - update
+        - list
+        - watch
     - apiGroups:
         - policy
       resources:
@@ -171,7 +183,7 @@ rules:
     - apiGroups:
         - security.openshift.io
       resourceNames:
-        - nonroot
+        - nonroot-v2
       resources:
         - securitycontextconstraints
       verbs:

charts/redis-enterprise-operator/values.yaml

@@ -20,7 +20,7 @@ operator:
 
     # Image tag for the operator image.
     # This typically represents the operator version.
-    tag: 7.8.6-1
+    tag: 7.22.0-7
 
 # Configuration options for the admission webhook
 admission:
@@ -41,7 +41,7 @@ openshift:
   scc:
 
     # Whether to install the SecurityContextConstraints object for Redis Enterprise
-    install: true
+    install: false
 
     # Whether to keep (avoid deleting) the SecurityContextConstraints object when uninstaling the chart.
     # This can be useful if installing the chart multiple times in the cluster, such that the SCC